Summary
A remote control service is running on this port.
Description :
UltraVNC seems to be running on the remote port.
Upon connection, the remote service on this port always sends the same 12 pseudo-random bytes.
It is probably UltraVNC with the DSM encryption plugin.
This plugin tunnels the RFB protocol into a RC4 encrypted stream.
Solution
If this service is not needed, disable it or filter incoming traffic to this port.
